Relax X.509 CRL verification if the issuer is a CA
authorSebastien Pouliot <sebastien@ximian.com>
Wed, 30 Mar 2011 19:58:08 +0000 (15:58 -0400)
committerSebastien Pouliot <sebastien@ximian.com>
Wed, 30 Mar 2011 19:58:08 +0000 (15:58 -0400)
commit8b5e9939bacced87b5a501c8c24a2c835fc84fde
treeefbfae326040d53d9785bd4fd1f4efdbbbdc84e6
parent21453a99ea73a7b248db3f30c1d11d18847e8936
Relax X.509 CRL verification if the issuer is a CA

* X509CRL.cs: Relax CRL verification when the issuer is known to be
a CA certificate (basic constraints) and has digitalSignature in it's
key usages (instead of the 'expected' cRLSign)
mcs/class/Mono.Security/Mono.Security.X509/X509CRL.cs